Wanadoo Livebox (Inventel DV4210) Wireless ADSL Modem Router

10 Mar 2007. Finally managed to manually flash my Livebox up to v5.08.03-uk. Not sure why yet as I now cannot get to a command prompt. Noticed that the linux kernel version has increased to 2.6.12, Busybox is now at 1.1.3, Wget is 1.9.1, along with various others that I haven't checked yet including ip_tables and not a line of GPL source code to been seen anywhere. Not quite complying with the terms of the GPL. I will keep looking to see if I can get to a command prompt. Hopefully kernel 2.6.12 will be easier to work with to make an NFS/Samba server.

27 Dec 2006. Although I can compile a kernel based on the supplied source, it causes adsld to segfault no matter what I do. Also, the kernel in the v5.6.02-uk firmware image has support for more MTD devices than those in the latest supplied source. This suggests to me that Inventel have not supplied the correct source for the kernel they have released and as such are not complying with the terms of the GPL.

23 Nov 2006. Wget builds correctly and copies files OK.

22 Nov 2006. After much ado I have managed to build a version of Busybox using the incomplete sources supplied by Inventel. In this I have managed to include hard_reboot.c and get_param.c to do the same as the Busybox binary supplied by Inventel. Hard_reboot.c needed some headers, a sysMipsSoftReset() and a boardIoCtl() routine adding. In get_param.c I needed to add the missing code to return BL_SERIAL_NUMBER, BL_INVENTEL_WIRELESS_MAGIC and BT_PIN. I also added code to return the H235_KEY along with the unlock code that is based on the H235_KEY. Although ledctrl.c will now compile and run I have not checked that all the LEDS are switching correctly. More work is still needed to get the same functionality in this source as in the binary supplied in the Livebox image.

15 Nov 2006. Finally managed to compile the 2.4.17 kernel and modules using the source supplied by Inventel. I managed to use the toolchain that they supplied and I have added all the modules that I want (USB, SCSI, etc).

12 Nov 2006. I have started to look at the source code released by Inventel on its web site Inventel GPL Source dated 2006-07-18 which includes the sources, binaries and configuration files required to build the RedBoot loader. This builds if you follow the instructions, I just haven't installed it yet. This means that we could re-enable Ctrl-C during the boot process as well as sign our own images by including our own public keys. Inventel have also included the sources and tools required to build all the GPL software included in the Livebox. I have looked at the source to Busybox but it will not build as some files appear to be missing. These files, including "hard_api/board_api.h" which is used by ledctrl.c, get_param.c and hard_reboot.c, are not included in any of the sources. Looking at other BCM6348 distributions that use busybox, it appears that Inventel have made some changes to busybox and these files are need to allow busybox to be built with the same options as those included in the Livebox.

11 Nov 2006. Have installed a modified version of v5.06.2-uk that has a dropbear server as well as support for USB and NFS mounted drives. Still not managed to get an NFS or Samba server included yet, but still trying.

8 Nov 2006. Finally managed to recover my Livebox. All thanks for this go to DarkFader for instructions on how to do this along with OpenWrt and its support for HairyDairyMaid's latest HairyDairyMaid_WRT54G_Debrick_Utility. I used this with JTAG to flash an early version of RedBoot to the Livebox. This allowed me to get to a RedBoot command prompt via the serial port where I could delete and then recreate the user_fs partition before recovering using v5.00-rc8L-uk.

1 Nov 2006. Bricked my Livebox doing a flash update from v5.03.3-fr to a modified v5.06.2-uk, don't know why as I've flashed different images before without a problem. Never mind, I have installed a JTAG port so will see if this will work.

29 Sep 2006. Have received a copy of firmware v5.06.2-uk. I am currently working to include dropbear, NFS and USB hdd support into this image. More details will appear later.

22 Sep 2006. Uploaded Livebox Recovery ISO image v5.04.3-uk.

10 Sep 2006. I have finally managed to create a flashable image based on v5.05.1-uk that supports dropbear as a ssh server. This image also has support for USB and NFS mounted drives. In this image I have disabled telnet so it is a bit more secure from outside interference. The image is not finished as I want to be able to include an NFS server as well as a Samba server. Once I have managed this I will post the method and files required. The installation method is a bit convoluted but it does work.

09 Sep 2006. Updated getting a command prompt. Made some changes to modifying cfgsave files.

?? Jul 2006. Inventel have released more GPL code on Inventel GPL Source as a 333MB single image download. They have also included the sources to RedBoot as a 117MB single image Download.

30 Apr 2006. Updated Mounting NFS Shares to use the -o nolock option to reduce the amount of time it takes the nfs mount to complete. Still no update on getting to a command prompt on the latest firmware.

18 Mar 2006. Inventel have released some source code for the Livebox on their web site Inventel GPL Source which appears to be missing some configuration files to allow an easy build. They have included a toolchain for the RedBoot as well as a toolchain for the GPL Linux sources. So far I have managed to build a kernel as well as RedBoot and BusyBox. Unfortunately, while the kernel I built is the same size as the one built by Inventel, none of the other files are the same size so I am not sure if the configurations are correct.

07 Mar 2006. I have downloaded an older RedBoot to my Livebox which allows me to inhibit the boot. I have also downloaded a modified set of firmware which includes all the changes that I wanted. My Livebox now has the telnet server stored in the CRAMS as well as support for USB and NFS drives, no password for the command prompt and the changing of the URL for the automatic upgrading. When I get time I will post the method used.

?? Mar 2006. Inventel have released an upgrade to the Livebox (v5.05.1-uk) which appears to remove all the backdoors that I know of that could be used to get the unlock key or access a shell. So far I have not managed to find a way into the Livebox once it has been upgraded to this version.

03 Feb 2006. Changed telnet_server to kill the telnet server when parameter 'stop' is passed. Thanks to pcmaster for an html version of the unlocking program.

29 Jan 2006. Added ext2.o as a downloadable file as firmware versions greater than v5.02.2-uk do not have this file and its needed if mounting ext2 formatted USB drives.

28 Jan 2006. Included information on getting a command prompt without hacking a dwb file.

13 Jan 2006. I have just been forwarded a program (many thanks to Evariste Hardy) to unlock the Inventel Livebox and allow it to be used with any ISP. See Unlocking the Livebox for more details. Also supplied was the password for the test account for some firmware versions. See here for more details.

23 Dec 2005. Inventel have finally released some of the source code for the Livebox. The sources are available from the following location, Livebox sources. Currently there are some packages missing. I am still trying to compile a toolchain before I look at compiling any of the supplied source.

17 Nov 2005. Still not managed to work out the method used to generate the md5sum. Bummer. Will keep on trying.

21 Oct 2005. Added Livebox Install ISO image after repeated requests.

19 Oct 2005. Added cfgsave files for v5.02.7-fr, v5.03.3-fr, v5.03.3-uk and v5.04.2-uk. I have used the /bin/websrv from v5.03.3-fr to generate these files so hopefully the md5sums are correct. These contain the wifi hack for no password.

17 Oct 2005. Removed cfgsave files for v5.02.7-fr, v5.03.3-uk and v5.03.3-fr as they have an md5sum included but don't know what they have md5sum'd, yet!.

13 Oct 2005. Added Mounting USB Storage and NFS shares.

12 Oct 2005. Added v5.02.1-sp cfgsave file.

11 Oct 2005. Added v5.03.3-uk, v5.03.3-fr cfgsave files.

2 Oct 2005. Found a more universal hack to the adsld file. Should allow connection to any ISP without having to be changed again.

31 Aug 2005. Managed to get back to a command prompt.

So far I have managed to do the following,

Modify cfgsave.dwb files. See here for more details.
Connect using the serial port, Parts List and Schematic available here. No opening of the box required.
Install a telnet server. See here for more details.
Get to a Command Prompt. See here for more details.
Unlock the Livebox to use any ISP. See Unlocking the Livebox for more details.
Stop phoning home. I have made changes to /etc/autoconf.conf by changing CONFIG_DEFAULT_UPDATE_MACHINE="10.0.0.242" instead of "developers.inventel.com" and to /etc/firm.conf by changing UPDATE_MACHINE=10.0.0.242 instead of developers.inventel.com. I extracted these files from the relevant firmware image, modified them and then copied them down using wget. You can use 'sed' to do the changes in the following manner from a console prompt,

cat /etc/autoconf.conf | sed 's/developers.inventel.com/your.server.ip.address/' >/var/autoconf.conf
rm /etc/autoconf.conf
mv /var/autoconf.conf /etc/autoconf.conf
cat /etc/autoconf.conf and verify that the change has been made.
Do the same changes with /etc/firm.conf and verify the contents. This appears to have worked and stopped the automatic updates to the firmware from Inventel's site.

Mount a USB Flash Drive. See here for details.
Mount an NFS share. See here for details.
Still To Document, Build a new CRAMFS with all the above incorporated it it. I am currently trying to determine how to do this.

I have uploaded a copy of the Livebox Install ISO image after repeated requests for a copy of it. The install CD contains a very early version (v5.00.RC5.1-uk) of the firmware and you cannot downgrade to it, but it does have some other bits that people have found useful.

Andy Potter.